[cisco-voip] Two IPCC X Cluster 4.x boxes with winmgmt.exe at 100% cpu

[Kevin Thorngren]

In the case I referenced they found that one of the logs was 260MB with 
over 1 million events.  They exported the log and set the max size to 
100MB (I am not sure if these were recommendations from MS or just a 
size they chose to capture a certain number of days of activity).  
Although the specific process was never tracked down the conclusion 
form MS was that a particular process was accessing the event logs 
causing winmgmt to spike the CPU.

I don't have a definition for "overly large" though ;-)

Be careful when exporting the logs as I have seen this cause CPU spikes 
as well.

Kevin
On Sep 6, 2006, at 4:03 PM, Simon, Bill wrote:

> How would you define "overly large"?
>
>
>
> Kevin Thorngren wrote:
>> Well, I have not done much with IPCC X but I found a case where MS 
>> found that overly large application, system and security event logs 
>> caused high CPU utilization.  Might be worth checking out.
>> Kevin
>> On Sep 6, 2006, at 2:26 PM, Simon, Bill wrote:
>>> Consider this a "me too" post - we've been seeing some CPU-high 
>>> behavior
>>> from those services lately as well.  Restarting the services seems to
>>> bring it back down to normal.
>>>
>>> Jason Aarons (US) wrote:
>>>> Any ideas why winmgmt.exe might be at 100% on both boxes in my CRS
>>>> 4.0(4) cluster ? –jason
>>>>
>>>>
>>>>
>>>> OS 2000.2.7sr8
>>>>
>>>>
>>>>
>>>> Can I disable the Windows Instrument Management service and the 
>>>> Windows
>>>> Instrument Management Extensions service?
>